Input from Ben Wheeler

The rewrite rule should be

   RewriteEngine on
   RewriteCond %{REQUEST_URI} !^/+twiki/+pub/+TWiki/+.+
   RewriteRule ^/+twiki/+pub/+([^/]+)/+((([^/]+)/+)+)(.+) /twiki/bin/viewfile/$1/$4?filename=$5 [L,PT]

to protect also when a person uses // and /../ etc

And also for protecting subwebs

I am actioning. Also on t.o.

-- KJL

Done

I edited TWiki:TWiki.TWikiAccessControl, TWiki04:TWiki.TWikiAccessControl, and TWiki:Codev.KnownIssuesOfTWiki04x00x00

I added the wrong Item number on SVN11203. I have added the ref here and removed it from the other bug report.

Ready for release. And in the bucket for Hotfix 3

-- KJL